$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: IRjYtxfC1rQqkPFN8JI8kPM6GdwbZ1WNs8/90OLAbFI= Subject key identifier: FD:E7:E7:62:59:99:84:56:FB:12:8A:63:CA:13:A5:3F:D4:0A:1A:D1 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 0403 Signing time: Fri 25 Apr 2025 00:16:31 +0000 Manifest this update: Fri 25 Apr 2025 00:16:31 +0000 Manifest next update: Fri 02 May 2025 00:16:31 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: H71x8sWNzjLcvcc0tF1F3c4++qRWE+rAkZ2aqqQvBv8=) 2: A8827568116911EEBB241C32C4F9AE02.roa (hash: ePscgiftvgu3AgZJRcwiRUYhc5l5akEknNm+3bxCM0A=) 3: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: uCKPAwy0X3Z4CL+hlBr0CZ+w6vMoqyCthCGEPEwyTxY=) 4: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: RgkBiig85GBTWo6hrTV95O/BhHQIjrp9qKOVuIGC96Q=) 5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: 1RhS2h2tWn1m1rNY8jrx9gtNAHNEkDyNHgYU79X2jK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Apr 25 00:16:31 2025 GMT Not After : May 2 00:16:31 2025 GMT Subject: CN=680ad45f-99fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ea:83:10:2b:7b:d1:5b:6e:49:6b:ef:ed:58: b8:ce:fa:96:a1:c8:04:b2:df:65:aa:4b:61:7a:66: 19:6b:8e:5d:d5:b6:a4:55:5b:90:b7:5a:e7:f8:93: e9:92:22:3e:00:86:96:d5:f8:f3:6d:79:1e:c8:b8: ef:83:3f:42:6f:cf:5a:76:5d:de:44:f3:2a:d4:84: 4f:01:69:6f:6e:9e:8e:05:7e:9f:5e:d8:45:e3:7c: 2d:0f:cd:7e:20:d4:ca:8e:e9:60:13:06:44:cd:c2: 37:04:54:56:2b:13:81:51:70:fd:86:72:29:72:5d: a1:26:88:03:d5:8e:46:f1:9d:2d:f0:15:d7:aa:e0: 73:35:87:cf:19:04:42:dc:77:bc:14:ae:40:7b:3d: 8b:ce:6d:d6:a6:0b:c7:88:c8:08:0d:00:b9:3b:27: 1f:f5:97:11:02:f0:18:a8:1b:af:64:bf:43:21:70: ec:6f:5c:98:7e:42:d2:08:aa:f3:8e:5f:90:b2:d8: aa:1a:28:87:d1:b4:df:de:62:9a:2f:fe:3c:7d:ee: 50:f6:6b:c2:2c:73:e0:3f:5e:da:d8:74:d3:2d:fd: 15:a6:4e:6c:f5:1a:05:5d:51:77:f9:28:6d:3c:8c: 82:51:19:20:fd:d8:d8:bd:5f:5e:b1:3b:7b:8f:85: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E7:E7:62:59:99:84:56:FB:12:8A:63:CA:13:A5:3F:D4:0A:1A:D1 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:9a:7c:71:1e:d5:22:35:59:77:3f:5c:e0:a4:87:eb:0b:d0: 49:63:29:07:bd:be:d0:bb:23:8b:e1:48:6d:50:8b:58:50:3c: 93:13:06:35:8b:b4:88:1d:e9:ce:8b:5e:ae:5e:9d:2b:94:ec: af:65:44:cf:9c:c4:ce:74:57:e9:ae:44:35:44:f5:73:88:bc: 3a:67:67:3b:fb:4d:68:23:c8:74:03:01:f6:06:1d:9a:3e:6d: 00:a9:ef:40:08:f8:d6:4c:cb:f9:4f:b8:af:b1:d4:cf:e4:05: b5:08:80:b1:29:6e:51:e5:23:2d:f5:fb:3f:e7:8d:65:50:f6: b9:ce:44:79:06:a9:5e:02:6a:c7:ea:80:f5:2b:52:a5:ef:1d: 0b:8e:ed:b5:68:3a:d7:c4:29:91:46:ad:bf:8f:b6:d1:a0:bd: bf:fb:d1:e4:bc:bd:37:ca:2f:2d:6e:f5:49:43:b3:25:c5:c2: 95:f5:a9:b7:54:ee:cb:35:58:f6:13:b5:51:38:23:0b:47:cd: 3e:dd:c6:cf:2b:67:a5:b9:a0:a7:22:b4:1b:9a:97:96:18:67: 0f:01:71:fc:4c:37:66:bd:57:12:6c:73:69:9c:6f:ab:35:58: 60:51:da:2b:9b:94:0f:55:7b:06:0a:fb:41:e0:5c:a8:ea:38: 11:45:8b:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUwNDI1MDAxNjMxWhcNMjUwNTAyMDAxNjMxWjAYMRYwFAYD VQQDEw02ODBhZDQ1Zi05OWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmeqDECt70VtuSWvv7Vi4zvqWocgEst9lqkthemYZa45d1bakVVuQt1rn+JPp kiI+AIaW1fjzbXkeyLjvgz9Cb89adl3eRPMq1IRPAWlvbp6OBX6fXthF43wtD81+ INTKjulgEwZEzcI3BFRWKxOBUXD9hnIpcl2hJogD1Y5G8Z0t8BXXquBzNYfPGQRC 3He8FK5Aez2Lzm3WpgvHiMgIDQC5Oycf9ZcRAvAYqBuvZL9DIXDsb1yYfkLSCKrz jl+QstiqGiiH0bTf3mKaL/48fe5Q9mvCLHPgP17a2HTTLf0Vpk5s9RoFXVF3+Sht PIyCURkg/djYvV9esTt7j4U81wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3n52JZ mYRW+xKKY8oTpT/UChrRMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZmnxxHtUiNVl3P1zgpIfrC9BJYykHvb7QuyOL4UhtUItYUDyTEwY1 i7SIHenOi16uXp0rlOyvZUTPnMTOdFfprkQ1RPVziLw6Z2c7+01oI8h0AwH2Bh2a Pm0Aqe9ACPjWTMv5T7ivsdTP5AW1CICxKW5R5SMt9fs/541lUPa5zkR5BqleAmrH 6oD1K1Kl7x0Lju21aDrXxCmRRq2/j7bRoL2/+9HkvL03yi8tbvVJQ7MlxcKV9am3 VO7LNVj2E7VROCMLR80+3cbPK2eluaCnIrQbmpeWGGcPAXH8TDdmvVcSbHNpnG+r NVhgUdorm5QPVXsGCvtB4Fyo6jgRRYte -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:28 2025 by rpki-client